> neither is the 'less secure apps' flow they invented You can't have done that recently. Less Secure Apps was recently deprecated and removed. They've been ac

> neither is the 'less secure apps' flow they invented You can't have done that recently. Less Secure Apps was recently deprecated and removed. They've been actively discouraging using it for around 5 years. Thunderbird has supported the OAuth flow for Gmail since at least 2017 (I swear it's been there longer, but 2017 is the earliest reference I can find). It's used it as the default option when detecting Gmail since before COVID at least. It did promote the use of "Less Secure Apps" previously and that option was still available after the introduction of OAuth, but not as the default. I no longer use Thunderbird (I switched to Spark, which solved a number of issues I was experiencing with unread email counts), but it's been a pretty good experience for a long time. Especially if you have multiple email accounts from different providers.